Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230342e302f32342d3234203d3e20323638393231.roa
File:                     34352e3137352e3230342e302f32342d3234203d3e20323638393231.roa (raw, json)
Hash identifier:          FlN3nU5/yRdM+nk5/PTSgQADwQAjlfuFyf0lbwpjl5M=
Subject key identifier:   EA:C8:D3:51:7B:12:FC:ED:0D:7E:89:A5:44:38:25:7D:3D:A0:5B:53
Certificate issuer:       /CN=E72BD72CA25320A444880C04AC90CC5F3D638430
Certificate serial:       2F71D59726BCA3FACFB241EE6B0E8464DDEFDA76
Authority key identifier: E7:2B:D7:2C:A2:53:20:A4:44:88:0C:04:AC:90:CC:5F:3D:63:84:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230342e302f32342d3234203d3e20323638393231.roa
Signing time:             Wed 03 Apr 2024 23:37:29 +0000
ROA not before:           Wed 03 Apr 2024 23:32:29 +0000
ROA not after:            Wed 02 Apr 2025 23:37:29 +0000
asID:                     268921
IP address blocks:        45.175.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.crl
                          rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:71:d5:97:26:bc:a3:fa:cf:b2:41:ee:6b:0e:84:64:dd:ef:da:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E72BD72CA25320A444880C04AC90CC5F3D638430
        Validity
            Not Before: Apr  3 23:32:29 2024 GMT
            Not After : Apr  2 23:37:29 2025 GMT
        Subject: CN=EAC8D3517B12FCED0D7E89A54438257D3DA05B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:61:98:b6:57:12:c5:cb:34:d8:98:aa:7d:
                    95:09:54:db:76:b8:f6:15:62:d4:ac:51:38:e4:1a:
                    09:93:75:a6:d4:b6:bb:a6:77:87:e1:60:37:ac:c4:
                    42:f5:bb:c8:59:c2:d0:b8:a2:dc:9e:27:b4:16:8c:
                    cf:8d:43:c0:60:81:7e:86:31:20:fc:ff:e5:23:32:
                    40:3e:79:72:87:a6:43:b8:8e:17:52:55:8d:8e:80:
                    45:54:03:56:27:03:30:2c:05:15:dc:47:62:f9:a9:
                    2e:e7:c5:e0:1e:5e:35:c7:f3:1e:1a:7f:53:8d:87:
                    8b:94:4a:0a:cd:91:70:51:9c:d5:3f:20:08:6d:06:
                    e9:f9:dd:84:34:c4:ce:03:47:b2:e3:59:5a:ed:f3:
                    db:4a:8c:71:a5:fe:da:95:87:f4:35:03:24:35:19:
                    8b:68:7c:10:65:49:08:0e:57:36:c3:60:17:79:88:
                    b9:e5:4b:47:60:52:b9:08:c0:f3:17:14:f0:b6:34:
                    96:c0:6b:cb:d7:db:5b:c2:23:ba:fa:2b:e6:d9:13:
                    53:1b:33:c1:1b:e5:79:ce:aa:74:37:06:fe:84:17:
                    a7:a1:38:ff:c7:22:07:cf:b3:a0:bc:2e:aa:4b:b5:
                    67:39:14:56:30:92:6e:bc:9a:6d:f7:9a:9a:36:33:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C8:D3:51:7B:12:FC:ED:0D:7E:89:A5:44:38:25:7D:3D:A0:5B:53
            X509v3 Authority Key Identifier:
                keyid:E7:2B:D7:2C:A2:53:20:A4:44:88:0C:04:AC:90:CC:5F:3D:63:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230342e302f32342d3234203d3e20323638393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c1:b9:9c:d3:ef:e8:83:42:1d:34:e0:bc:7a:10:a3:fe:d8:
         62:89:25:0e:2d:84:74:89:7b:d7:d9:a8:e6:1e:94:c1:c4:1c:
         3c:92:55:9e:e1:1d:e3:0b:be:4a:00:5f:67:b9:ff:34:0e:f7:
         5a:dd:c8:d2:4c:7a:a7:dc:39:9f:7c:ab:88:eb:eb:2e:1d:7c:
         98:21:1c:b8:fd:3b:87:7e:5e:4f:e4:12:e5:37:0b:91:b2:d8:
         82:5c:7a:f2:2e:aa:83:ae:bf:b3:f0:28:43:fc:9a:a5:95:08:
         0b:cd:23:bd:4d:fe:48:e0:23:c8:00:4c:ec:bc:65:a5:ef:4c:
         8d:34:fa:d4:af:5e:fe:25:66:1a:40:bf:10:c8:55:89:95:1b:
         ea:3c:e7:c9:5e:d2:8b:17:c9:57:43:0c:b1:7d:92:2c:a0:f9:
         b4:d0:7d:90:e8:02:2d:4f:e8:e6:c9:d2:c9:20:fc:eb:45:7d:
         cf:4c:ff:df:b2:08:94:6b:34:2c:58:1a:aa:49:1b:0c:9e:f6:
         e7:7a:6e:f5:bd:0b:fa:b8:1e:8c:39:63:cd:aa:6d:be:75:32:
         e9:b8:c6:24:64:1a:c4:8c:ad:27:35:41:ce:5d:27:53:90:50:
         91:8e:ed:06:9b:dd:a5:b1:7f:f4:23:bd:48:ff:cc:f0:cd:a7:
         8f:4a:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 08:25:06 2024 by rpki-client on console-ams.rpki-client.org